Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/323830333a653865303a3a2f33322d3332203d3e20323639383735.roa
File:                     323830333a653865303a3a2f33322d3332203d3e20323639383735.roa (raw, json)
Hash identifier:          npUeDPJPdh6Mp2q6chiKnfpBaYVBnM7Otkfpeg5320o=
Subject key identifier:   AA:EF:2E:20:6E:19:35:7E:36:56:D9:6C:D1:F6:48:57:E0:35:31:78
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       096ECF3F2B2EC02166641DDCB846812836A17B74
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/323830333a653865303a3a2f33322d3332203d3e20323639383735.roa
Signing time:             Tue 05 Mar 2024 18:10:04 +0000
ROA not before:           Tue 05 Mar 2024 18:05:04 +0000
ROA not after:            Tue 04 Mar 2025 18:10:04 +0000
asID:                     269875
IP address blocks:        2803:e8e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6e:cf:3f:2b:2e:c0:21:66:64:1d:dc:b8:46:81:28:36:a1:7b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Mar  5 18:05:04 2024 GMT
            Not After : Mar  4 18:10:04 2025 GMT
        Subject: CN=AAEF2E206E19357E3656D96CD1F64857E0353178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:19:b8:d3:8d:72:fd:1e:87:ac:7f:18:15:
                    3b:5e:31:38:2f:fa:01:64:48:6a:df:73:88:07:1c:
                    7c:0d:8d:18:d1:47:10:d9:64:6a:4e:8c:34:f4:67:
                    bc:c6:6f:28:aa:19:c5:e3:32:79:b9:e6:db:d3:94:
                    bc:40:4e:bc:9e:50:66:3c:68:3f:3a:b0:db:61:8d:
                    05:a5:ff:da:9e:69:b5:bf:37:37:a8:de:c6:23:e9:
                    48:06:07:56:7e:09:65:44:0e:d1:af:a2:91:f1:f4:
                    db:2b:36:36:c2:0b:b7:be:19:75:be:ae:07:7f:ce:
                    f2:df:64:38:10:3d:1d:c0:76:af:d0:8f:2b:78:63:
                    9e:b8:2d:49:ef:d9:d8:35:8f:00:94:dc:f6:96:3d:
                    db:fd:07:3c:6d:7f:2b:b9:7f:ed:af:56:9a:2f:2e:
                    13:f7:dd:0c:b4:29:7c:2a:7c:b5:d7:90:18:74:24:
                    b5:df:df:83:bc:3a:bd:1c:9c:65:6c:6d:2d:e4:64:
                    3c:07:77:50:7b:78:a9:31:ab:d5:ff:a1:56:c9:f7:
                    e8:f1:39:52:ae:2e:9a:f5:1d:76:c6:39:3a:75:37:
                    09:b5:32:0b:84:03:53:58:9d:b5:19:1c:27:be:ed:
                    e6:fb:ed:b1:30:5c:25:37:ff:7c:5e:29:b7:83:5f:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EF:2E:20:6E:19:35:7E:36:56:D9:6C:D1:F6:48:57:E0:35:31:78
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/323830333a653865303a3a2f33322d3332203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:e5:81:d5:d0:83:18:1c:45:59:18:e3:ff:65:28:71:d6:12:
         0d:b9:80:b9:10:5f:27:d2:37:95:f1:48:1c:28:79:f3:80:9d:
         d0:a8:e4:19:da:82:df:38:48:e1:c4:03:26:10:05:c9:90:ef:
         32:33:49:64:c5:ec:37:60:a1:ce:27:b2:3b:46:34:12:07:42:
         9c:aa:2e:55:cd:57:7f:a8:a3:df:c0:e2:3e:bb:55:62:7c:f3:
         8e:91:89:1e:a4:46:bb:f1:96:5a:a1:05:4b:01:b5:cd:d3:63:
         60:4d:75:70:be:52:5f:52:84:b7:f2:c1:8d:16:43:25:ae:d6:
         3f:d8:a7:d6:c0:6c:dc:ef:a3:d8:4f:08:7c:fb:d5:fe:79:df:
         f2:3c:44:60:2d:7e:9e:2d:fa:00:74:68:a5:71:58:17:9f:37:
         8c:80:5f:3f:83:81:f8:71:a6:2f:02:31:b0:95:61:79:6a:2a:
         6c:30:6a:7c:1b:2e:c7:2a:9a:0c:2c:f1:2c:d4:06:d6:9b:95:
         c0:3a:30:28:a9:71:cf:e6:13:6e:ff:95:5b:f9:c8:f2:93:38:
         ba:42:e6:18:0e:1c:be:25:90:f7:20:9b:96:ca:4b:73:0c:c4:
         bd:2a:c9:6e:e5:b6:ea:83:d1:42:6f:67:25:5d:87:79:d3:ea:
         a5:d0:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org